$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/F7F03FB2EF3211EDA614D473C4F9AE02.roa File: F7F03FB2EF3211EDA614D473C4F9AE02.roa (raw, json) Hash identifier: zbKLAo/RYsAjaSNMWmlKVll/RQnL894fFswCXaSJvn8= Subject key identifier: ED:61:25:55:2B:BD:59:FC:96:5A:F2:E1:90:35:9F:D4:B3:5F:57:FB Certificate issuer: /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Certificate serial: 06A1 Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/F7F03FB2EF3211EDA614D473C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:15:34 +0000 ROA not before: Sun 06 Apr 2025 22:34:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140525 IP address blocks: 103.166.86.0/23 maxlen: 23 103.166.86.0/24 maxlen: 24 103.166.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1697 (0x6a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB22, serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Validity Not Before: Apr 6 22:34:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a45816-cd9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:58:e6:b4:34:41:b4:bd:a8:db:29:6c:2b:7d: 26:59:9c:91:fb:84:fd:76:e3:95:e9:ba:5c:de:e3: 7e:8f:16:d5:57:b4:b5:b8:0c:e3:85:f4:ff:dc:87: 74:f8:19:37:64:4a:3e:07:85:2a:7c:ed:6c:04:60: d0:7a:3e:e1:ed:8f:f2:69:26:00:37:45:d7:e1:d5: 9f:84:8d:45:ac:17:ed:fd:aa:13:a1:57:49:b8:30: 9c:e3:c5:35:48:a5:e5:70:21:6e:b3:cc:00:62:a1: 3e:41:04:31:2e:41:2c:c2:f7:4f:70:97:fd:c1:e5: 62:43:53:dd:9c:e9:65:85:1c:22:63:22:be:7d:78: 9d:af:06:0e:0d:1e:f9:24:cc:ef:7b:59:07:bb:67: b7:7e:8d:f3:57:fa:71:02:6e:66:f1:99:37:1a:42: a9:8d:5a:88:75:5b:3e:63:4d:3a:6b:67:0a:ed:c5: ca:af:da:95:82:1d:55:4d:65:79:92:a2:de:54:29: ae:68:99:50:fb:73:92:36:0c:12:7a:75:67:98:91: 8d:dc:6a:5c:51:36:f9:6d:00:f7:4b:ae:be:fa:b9: 11:ae:52:b0:74:44:61:15:ee:a3:f8:dd:56:86:e7: 8f:d7:bc:6e:38:dd:6a:fd:9f:c6:65:c4:40:7a:39: 01:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:61:25:55:2B:BD:59:FC:96:5A:F2:E1:90:35:9F:D4:B3:5F:57:FB X509v3 Authority Key Identifier: keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/F7F03FB2EF3211EDA614D473C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.166.86.0/23 Signature Algorithm: sha256WithRSAEncryption c8:11:24:2f:0f:ba:0d:3c:15:cf:fe:de:e7:11:51:3f:17:66: 76:01:b2:e0:ef:46:e1:b8:4f:7d:49:64:bf:55:39:6e:d5:f8: 28:cb:40:f2:e7:e5:56:06:5e:b9:98:18:03:14:de:08:28:24: 2e:57:ff:91:f4:a0:5a:ca:ff:54:8d:c0:9f:e5:b8:80:cb:96: 99:89:80:94:7e:54:91:4c:79:aa:b0:a2:2f:12:37:06:14:d1: 73:cc:b5:8d:b5:dd:7b:a7:7f:e1:fb:a1:ba:33:d6:0b:fa:ed: 2e:27:81:79:f7:16:44:41:a0:dc:a3:79:dd:75:7b:c6:46:b8: 45:f7:62:f2:ea:bf:30:89:de:6a:83:7d:b3:ec:e4:f9:eb:4f: e3:9f:80:c7:25:c0:87:5a:3e:87:e3:02:41:7e:bc:36:f7:a5: 2a:11:2f:fa:ff:b6:ce:fb:63:02:8b:28:9f:d4:eb:e6:66:f0: 5b:25:99:ad:05:e1:59:2a:93:e3:51:4e:16:22:10:fd:73:f7: 83:e2:76:69:9e:af:74:f4:e5:7f:95:f5:25:0b:e1:59:ad:c7: d5:b7:f8:b6:61:2e:07:46:c3:01:b9:69:57:76:76:0a:bf:02: eb:77:d7:a8:a3:4b:d8:4a:be:1c:dd:5c:de:82:9d:5f:e1:1b: 19:21:37:02 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMjIxMTAvBgNVBAUTKDFGNUFDNTA2QjAxMTMwQzgyRTVFNDczMTYwM0JBMjY0 Q0VEODQ4NjYwHhcNMjUwNDA2MjIzNDQ4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTgxNi1jZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnljmtDRBtL2o2ylsK30mWZyR+4T9duOV6bpc3uN+jxbVV7S1uAzjhfT/3Id0 +Bk3ZEo+B4UqfO1sBGDQej7h7Y/yaSYAN0XX4dWfhI1FrBft/aoToVdJuDCc48U1 SKXlcCFus8wAYqE+QQQxLkEswvdPcJf9weViQ1PdnOllhRwiYyK+fXidrwYODR75 JMzve1kHu2e3fo3zV/pxAm5m8Zk3GkKpjVqIdVs+Y006a2cK7cXKr9qVgh1VTWV5 kqLeVCmuaJlQ+3OSNgwSenVnmJGN3GpcUTb5bQD3S66++rkRrlKwdERhFe6j+N1W hueP17xuON1q/Z/GZcRAejkB8QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO1hJVUr vVn8llry4ZA1n9SzX1f7MB8GA1UdIwQYMBaAFB9axQawETDILl5HMWA7omTO2Ehm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIyMi9DM0JDNzVGNEEx OTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1NZ3VYa2N4WUR1aVpNN1lT R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gxckZCckFSTU1ndVhrY3hZRHVpWk03WVNHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0JCMjIvQzNCQzc1RjRBMTkwMTFFQjlCRTlBRDMyQzRGOUFFMDIvRjdGMDNGQjJF RjMyMTFFREE2MTRENDczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6ZWMA0GCSqGSIb3DQEBCwUAA4IBAQDIESQvD7oNPBXP/t7nEVE/ F2Z2AbLg70bhuE99SWS/VTlu1fgoy0Dy5+VWBl65mBgDFN4IKCQuV/+R9KBayv9U jcCf5biAy5aZiYCUflSRTHmqsKIvEjcGFNFzzLWNtd17p3/h+6G6M9YL+u0uJ4F5 9xZEQaDco3nddXvGRrhF92Ly6r8wid5qg32z7OT560/jn4DHJcCHWj6H4wJBfrw2 96UqES/6/7bO+2MCiyif1OvmZvBbJZmtBeFZKpPjUU4WIhD9c/eD4nZpnq909OV/ lfUlC+FZrcfVt/i2YS4HRsMBuWlXdnYKvwLrd9eoo0vYSr4c3Vzegp1f4RsZITcC -----END CERTIFICATE-----Generated at Mon Mar 2 10:53:18 2026 by rpki-client